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Abstract 

Performance degradation of multiple-input multiple- 
output (MIMO) control systems having limited actu- 
ators is often handled by augmenting the controller 
with an antiwindup mechanism, which attempts to 
maintain system performance when limits are encoun- 
tered. The goals of this paper are: 1) To develop a 
method to analyze antiwindup systems to determine 
precisely what stability and performance degradation 
is incurred under limited conditions. It is shown that 
by reformulating limited actuator commands as re- 
sulting from multiplicative perturbations to the cor- 
responding controller requests, //-analysis tools can 
be utilized to obtain quantitative measures of sta- 
bility and performance degradation. 2) To propose 
a linear, time invariant (LTI) criterion on which to 
base the antiwindup design. These analysis and de- 
sign methods are illustrated through the evaluation of 
two competing antiwindup schemes augmenting the 
controller of a Short Take-Off and Vertical Landing 
(STOVL) aircraft in transition flight. 

/ 

1 Introduction 

Control design for actuator-limited plants is com- 
monly dealt with using a two-step design approach. 
First, a linear control design is completed for nominal 
operating conditions, ignoring limits. The controller 
is then augmented with a strategy to prevent actuator 
windup should one or more control requests violate 
the limits. Since the anti windup scheme is not gener- 
ated from the control design, its effect on overall sys- 
tem performance is unknown. Much of the literature 
on this subject evaluates anti windup performance 
heuristically by displaying well-behaved simulation 
time histories of the system response. This work 
presents a method of quantitatively assessing closed 
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loop stability and performance degradation proper- 
ties of antiwindup systems using //-analysis tools. Fi- 
nally, preliminary work is shown which suggests an 
LTI criterion for antiwindup system design. 


2 System Description 

2.1 Nominal Control Design 

The problem of limited actuators is addressed here 
via the integrated flight control for interconnected 
propulsion and airframe subsystems. A controller 
is iirst obtained for the nominal plant: a simpli- 
fied linear model of a supersonic Short Take-Off 
and Vertical Landing (STOVL) aircraft in transition 
flight, which is unstable. The nominal linear inte- 
grated fiight/propulsion model consists of the longi- 
tudinal flight dynamics (5th order), propulsion dy- 
namics (2nd order), and actuator dynamics (8 first 
order actuators). There are four “regulated” output 
variables, y_r, and six “measured” output variables, 
y_m, in addition to the four tracking errors, e. The 
nominal design plant is shown in Figure 1, depicting 
the complete assignments of exogenous (w) and actu- 
ator (u_c) inputs, regulated (z) and measured (y) out- 
puts, and frequency dependent weighting functions 
which establish performance and stability robustness 
specifications [1], The nominal controller is obtained 
via Hoc optimization of the design plant closed loop 
transfer function from w to z, H zw [2]. 



Note: WcsWo + sWb 


Figure 1: Hoo design plant 


1 







Figure 2: Limited STOVL Plant 



Figure 3: Closed Loop Anti windup System 


2.2 Actuator Limits 

Actuator limitations arise from propulsion system 
safety requirements. There are two safety protection 
mechanisms in the integrated system: 

1. Constraints on fuel flow ( WF ). Both upper 
and lower fuel flow limits ensure proper pressure, 
temperature, and fan speed levels in the turbo- 
machinery. 

2. Constraints on nozzle area actuators, (the aft 
and ventral nozzle areas AS and A78), and the 
ejector butterfly valve angle (ETA). ETA con- 
trols the nozzle area of the ejectors, producing 
vertical thrust. Lower limits are imposed on the 
total area to prevent surge conditions, which re- 
sult when the airflow through the compressor 
and fan blades is excessively restricted. 

The above limits are determined via nonlinear feed- 
back of appropriate engine quantities that indicate 
proximity of the engine to unsafe operating condi- 
tions. A schematic representation of the limited sys- 
tem is shown in Figure 2. 

2.3 Antiwindup System 

The closed-loop limited antiwindup system is shown 
in Figure 3. The element N is the limiting nonlinear- 
ity, which modifies the controller commands if upper 
or lower limits are reached. In many systems this 
block is a saturation-type nonlinearity. This is the 
case for the current STOVL system example, how- 
ever, the upper and lower limits vary according to 
flight conditions. 

The nominal controller has the state space realiza- 
tion (A, B } C, D). The "augmented” controller shown 
in Figure 3 has the realization (A, [B i],C7, [D 0]), 


and allows a memoryless matrix gain, A, to mod- 
ify the nominal controller states based on the dif- 
ference between the limited and nonlimited actuator 
values, e u . This block was first introduced in [3], and 
both generalizes and parameterizes multivariable an- 
tiwindup schemes. In this context, anti windup design 
reduces to determining a suitable choice for A. 

Two choices for A will be considered here, corre- 
sponding to two antiwindup approaches. Referring 
to Figure 3, one can view the anti windup scheme as 
a feedback loop around the augmented controller. It 
can be shown that the feedback parameter A modifies 
the augmented controller state equations as follows: 

z = (A- A C)x + (J3 - A D)y + A uu m 
u c = Cx- h Dy 

With this view one of the goals of the antiwindup de- 
sign is to make these modified dynamics relatively 
fast and well damped in order to regulate to zero 
any differences between the limited actuator signals, 
uum , and the actuator signals commanded by the con- 
troller, u c . Note that without the antiwindup pro- 
tection, integrators present in the nominal controller 
will not allow successful regulation of the difference 
between these signals. 

For this paper one choice of A is to place the eigen- 
values of A - AC further to the left by choosing A to 
attempt to make A — AC — A — k I [4]. Experiments 
show that k — 10 yields desirable antiwindup per- 
formance. Due to the dimensions of the system, this 
cannot be solved exactly (not enough degrees of free- 
dom in A). Thus a least squares approach is used to 
solve A2C = kl. Strictly for the purposes of compari- 
son another choice of A was the least squares solution 
of CAi = kL As expected, the performance of A2 is 
superior and is shown below. 

2.4 Step Response 

Figures 4-7 illustrate time responses of three configu- 
rations of the closed loop system shown in Figure 3 to 
a step of 3 in the 7 reference command, with the re- 
maining three reference commands held at zero. This 
reference command was chosen because it is essen- 
tially a propulsive lift command to the aircraft, and 
drives the fuel flow and nozzle areas to their respec- 
tive safety limits. Specifically, Figure 4 compares the 
decoupled 7-tracking capability of the nominal linear 
system with no limits present (solid line) with that of 
the two limited antiwindup systems discussed in the 
previous section: A = Ai (dashed line) and A = A2 
(dotted line). In the sequel, these two antiwindup 
systems will be denoted AW1 and AW2, respectively. 
Note that the limited systems are characterized by 
oscillatory behavior and loss of decoupling, with re- 
spect to the nominal linear system. Note also that 
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Figure 4: Decoupled command tracking step response 
comparison 




Figure 6 : Comparison of controller commands with 
limited actuator commands for AW1 


Figure 5: Controller output step response comparison 


AW1 results in a significantly greater steady-state 7 - 
tracking error compared with AW2. 

Figure 5 compares the actuator commands of the 
three systems. The antiwindup systems have the 
characteristic of boosting the fuel flow command in 
response to the area limit becoming active. This ac- 
tion occurs at approximately 0.4 seconds. This is seen 
more clearly in Figures 6-7, which compare the actual 
commands given to the plant (solid lines), with the 
controller output (dashed lines) for AW1 (Figure 6 ) 
and AW2 (Figure 7). Note that the fuel flow boost 
actually causes the fuel flow limit (dotted line) to be 
exceeded. 

From the above simulations, it is apparent that 
AW2 is in some sense “better” than AW1, because 
of the steady-state 7 tracking error and no signifi- 
cant differences in any other responses. Most litera- 
ture on antiwindup schemes stops with this heuristic 
evaluation. However, for a general anti windup design 
method, a quantitative distinction between compet- 
ing schemes is required, in order for the “best” anti- 
windup scheme to be obtained. 

It is the goal of this paper to formulate an LTI cost 
criterion on which to base the selection of A. This is 



Figure 7 : Comparison of controller commands with 
limited actuator commands for AW2 
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desirable due to the wealth of existing linear analysis 
and design techniques. To this end, two linear rep- 
resentations of the limited system are now presented 
and discussed in regards to their use in antiwindup 
system analysis and design. 


WFc 
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3 Antiwindup Analysis 
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The limited fuel flow and total area request can be 
linearly represented as resulting from diagonal (i.e. 
decoupled) input multiplicative perturbations to the 
corresponding plant actuators. By using the nonlin- 
ear simulation to determine bounds on the perturba- 
tions, the effects of the antiwindup design on stability 
and closed loop performance can be determined via 
^-analysis techniques. 

3.1 Limit Representation 

Fuel Flow Limit The multiplicative perturbation 
representation of the fuel flow limit is shown in Fig- 
ure 8(a), where WFJim represents the limited value 
of the controller output, WFjc. To obtain a bound 
on 6-WF, note from Figure 8(a) that 6-WF = 1 — 
WFJim/WF-c. For the current step response sim- 
ulations (r 7 = 3), this quantity reveals that 0 < 
6-WF < 0.37 for AW1 and 0 < 6-WF < 0.44 for 
AW2. 

Total Area Limit Since the area limit is imposed 
on the total controller area request, this quantity is 
subject to multiplicative perturbation. As before, 
6 -A = AJim/A-c — 1, with simulations showing 
0 < 6-A < 0.011 for AW1 and 0 < 6-A < 0.013 for 
AW2. There remains the further issue of distribut- 
ing the area perturbation among the three actuators. 
The amount of area correction is proportional to the 
relative sizes of each actuator; an accurate distribu- 
tion of the total perturbed area can be based on the 
nominal actuator values. Thus 20% of the total area 
perturbation is distributed to each of the ETA and 
A8 actuators, and 60% to the A78 actuator, as illus- 
trated in Figure 8(b). 

3.2 /x-Analysis 

Structured Singular Value The structured sin- 
gular value provides an indication of the stability 
properties of a system subject to block diagonal per- 
turbations. A standard form normalized perturba- 
tion (<r(A) < 1) representation of the limited STOVL 
closed loop system is shown in Figure 9, using the 
limit reformulation presented in the previous section 
to define a normalized perturbation and its inputs ( q ) 
and outputs (p). Robust stability to the multiplica- 
tive perturbations is guaranteed iff sup w p{H qv ) < 1 



<b) 

Figure 8: Multiplicative perturbation representation 
of limited controller fuel flow and area requests 


[5]. Figure 10 depicts fit(H gp ) [2], obtained via bound- 
ing techniques, for the two antiwindup systems, AW1 
and AW2. Note the larger stability margin of AW1 
as compared with AW2. This illustrates the classi- 
cal performance versus robustness tradeoff, in light 
of the inferior tracking performance of AW1 as seen 
in the simulations shown in Figure 4. A quantitative 
means of evaluating this performance degradation is 
now described. 


Worst Case Bode Plots If robust stability is 
in fact achieved for the system under consideration, 
there remains the issue of performance degradation 
due to the perturbations. For small stability mar- 
gins, performance can be degraded to such an ex- 
tent that the system is unacceptable, even though 
it is robustly stable. Since the nominal Hoo control 
design is based on optimizing <r(H zw ), the quantity 
maxA |i7£*£*.(ju>)|, the worst cast bode plot , lends in- 
sight into tfie nature of the degradation in the fre- 
quency domain. This is possible using /i-analysis 
by translating the nominal performance specifications 
into stability conditions using a so-called “perfor- 
mance block” [5]. 

The specific frequency response chosen to illustrate 
the performance difference between AW1 and AW2 is 
that from the 7 reference command to the weighted 
7 tracking error, with the frequency weighting cor- 
responding to the nominal design specifications (Fig- 
ure 1). Conservative bounds [2] of the nominal and 
worst case responses are shown in Figure 11. Though 
both AW 1 and AW2 are seen to have significant per- 
formance degradation with respect to the nominal 
system, AW1 exhibits particularly troublesome track- 
ing behavior at low frequencies. This is consistent 
with the degraded behavior comparison made using 
the simulation responses of Figure 4. 

It should be noted that in the above stability and 
performance analysis, conservatism is introduced by 


4 






Figure 9: Standard perturbation form of limited 

STOVL closed loop system 



Figure 10: Structured singular value comparison for 
the limited STOVL closed loop systems 



Figure 11: Nominal and worst case bode plots for the 
STOVL closed loop system 


using multiplicative perturbations to model the lim- 
ited actuator commands. These models consider neg- 
ative values of 6JVF and 6 -A as “valid” perturbar 
tions, when in fact negative values for these pertur- 
bations were not generated by the simulation used to 
determine them. Thus if Figures 10 or 11 are gen- 
erated assuming one or more negative perturbations, 
they are overly conservative. 

The above analysis methods yield quantitative 
comparisons between competing antiwindup schemes. 
However, they do not lead to a design method since 
each A requires a working nonlinear simulation to de- 
termine its corresponding perturbation bound. The 
following section addresses this issue. 

4 Proposed Design Approach 

The purpose of antiwindup protection is to provide 
an acceptable controller output during limited con- 
ditions. This goal is attained if the antiwindup pro- 
tection prevents the “blowing up,” or windup, of lim- 
ited control signals. One way to accomplish this is 
to make the control signals track their limited values 
until they do not violate the limits. This philoso- 
phy effectively restates the antiwindup performance 
goal as a reference tracking problem. The limited 
signals serve as boundaries on the controller output 
which the antiwindup protection must enforce. This 
sections presents a framework by which this tracking 
characteristic of an antiwindup system can be quanti- 
fied. The plausibility of this approach is illustrated by 
comparing the antiwindup systems AW1 and AW2. 

In order to evaluate the limit tracking performance 
of an antiwindup system, the closed loop system of 
Figure 3 is modified by removing the limiting non- 
linearity and treating the limited actuator signals as 
external reference inputs. The outputs of this new 
system are taken as the the corresponding controller 
signals. This view of the antiwindup system is shown 
in Figure 12. The anti windup protection gain ma- 
trix, A, can now be viewed as a static controller, with 
the original augmented controller talking the role of 
the plant. The design plant appears in a feedforward 
configuration. 
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Figure 13: Comparison of antiwindup tracking per- 
formance criterion 

In terms of this modified system, limit tracking per- 
formance will now be evaluated via the square trans- 
fer matrix from the reference inputs, u/{ m , to the 
tracking errors, e„. Comparison between two com- 
peting antiwindup schemes is now possible without 
requiring a prior nonlinear simulation as in the pre- 
vious section. This will be illustrated by examine 
this transfer function for the two antiwindup schemes 
AW1 and AW2. 

Figure 13 compares the maximum singular value of 
the above square transfer matrix for AW1 (solid line) 
and AW2 (dashed line). It can be seen that AW1 suf- 
fers in limit tracking performance at low frequency 
compared with AW2. Furthermore, the frequency 
range of degraded tracking performance is very sim- 
ilar to that shown in the worst case bode plot of 
Figure 11. This suggests the possibility of a design 
method based on minimizing the infinity norm of the 
limit tracking transfer matrix. 

5 Conclusion 

The problems of actuator limits and antiwindup 
mechanisms are important considerations in any 
practical control design problem. This has been inves- 
tigated here in the context of the integrated flight and 
propulsion control of a STOVL aircraft. A framework 
has been provided for the analysis of stability and 
performance degradation of a system operating un- 
der limited conditions. This is accomplished through 
the measures of structured singular value and worst 
case bode plots. 

These measures provide the ability to quantita- 
tively compare competing linear antiwindup schemes, 
as opposed to simply verifying their operation by 
viewing simulation time histories. This comparison 
is performed here on two antiwindup schemes hav- 
ing very different performance characteristics. It is 
shown that for these examples, the analysis results 
are consistent with the observed simulation behavior. 


Finally, preliminary work is presented regarding 
the design of antiwindup systems. A cost criterion 
is proposed which is based on a fundamental transfer 
function of any LTI antiwindup system. It is shown to 
correctly identify deficiencies in the example systems, 
as identified in the above analysis methods. This sug- 
gests the plausibility of an optimization procedure 
based on this criterion. However, this procedure is 
one of determining an Hoq optimal static feedback 
gain — a problem for which there are currently few re- 
sults. 
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